WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jt-express
Published
2024-12-11
Title
J&T Express Malaysia < 2.0.15 - Reflected Cross-Site Scripting via [placeholder]
Slug
jtrt-responsive-tables
Published
2017-11-03
Title
JTRT Responsive Tables < 4.1.2 – Authenticated SQL Injection
Slug
jtrt-responsive-tables
Published
2024-01-31
Title
JTRT Responsive Tables <= 4.1.9 - Cross-Site Request Forgery
Slug
judgeme-product-reviews-woocommerce
Published
2023-01-17
Title
Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS
Slug
juicer
Published
2023-02-20
Title
Juicer < 1.11 - Contributor+ Stored XSS
Slug
jungbillig-portfolio-gallery
Published
2024-04-26
Title
Filterable Portfolio <= 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
jupiterx-core
Published
2022-05-18
Title
Jupiter < 6.10.2 & JupiterX Core < 2.0.8 - Subscriber+ Privilege Escalation and Post Deletion
Slug
jupiterx-core
Published
2022-05-18
Title
JupiterX < 2.0.7 & JupiterX Core < 2.0.7 - Subscriber+ Arbitrary Plugin Deactivation and Settings Update
Slug
jupiterx-core
Published
2022-05-18
Title
JupiterX Core < 2.0.7 - Information Disclosure, Modification, and Denial of Service
Slug
jupiterx-core
Published
2023-07-20
Title
Jupiter X Core < 4.6.9 - Unauthenticated Arbitrary File Download
Slug
jupiterx-core
Published
2023-08-22
Title
Jupiter X Core Premium < 3.4.3 - Unauthenticated Privilege Escalation
Slug
jupiterx-core
Published
2023-08-22
Title
Jupiter X Core Premium < 3.3.8 - Unauthenticated Arbitrary File Upload
Slug
jupiterx-core
Published
2024-08-23
Title
Jupiter X Core < 4.6.6 - Unauthenticated Arbitrary File Upload
Slug
jupiterx-core
Published
2024-09-25
Title
Jupiter X Core < 4.7.8 - Limited Unauthenticated Authentication Bypass to Account Takeover
Slug
jupiterx-core
Published
2025-01-06
Title
Jupiter X Core < 4.8.6 - Missing Authorization to Unauthenticated Popup Template Export
Slug
jupiterx-core
Published
2025-01-06
Title
Jupiter X Core < 4.8.6 - Missing Authorization to Authenticated Library Sync
Slug
jupiterx-core
Published
2025-01-31
Title
Jupiter X Core < 4.8.8 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
Slug
jupiterx-core
Published
2025-01-31
Title
Jupiterx Core < 4.8.8 - Authenticated (Contributor+) Arbitrary File Read
Slug
jupiterx-core
Published
2025-04-25
Title
Jupiter X Core < 4.8.12 - Unauthenticated PHP Object Injection via PHAR
Slug
jupiterx-core
Published
2025-05-07
Title
JupiterX Core < 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jupiterx-core
Published
2025-05-16
Title
Jupiterx Core < 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
Slug
jupiterx-core
Published
2025-09-22
Title
JupiterX Core < 4.11.1 - Contributor+ Stored XSS
Slug
just-custom-fields
Published
2023-10-19
Title
Just Custom Fields <= 3.3.2 - Missing Authorization on AJAX Actions
Slug
just-custom-fields
Published
2023-10-19
Title
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery on AJAX Actions
Slug
just-custom-fields
Published
2024-07-08
Title
Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions